Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

SUSE: 2022:4040-2 Critical Update for Trento-Db Security Issues

suse
Calendar Grey November 18, 2022
Dist Suse Esm H88
The SUSE Software Update Bulletin highlights crucial security fixes for trento/trento-db, providing in-depth explanations of the patches implemented.
The container trento/trento-db was updated

Summary

Advisory ID: SUSE-RU-2022:2628-1 Released: Tue Aug 2 12:21:23 2022 Summary: Recommended update for apparmor Type: recommended Severity: important Advisory ID: SUSE-SU-2022:2649-1 Released: Wed Aug 3 15:06:21 2022 Summary: Security update for pcre2 Type: security Severity: important Advisory ID: SUSE-SU-2022:2866-1 Released: Mon Aug 22 15:36:30 2022

Topics%20covered

Topics Covered

security advisory security issue SUSE important patch trento

References

References : 1087072 1164384 1193951 1195059 1195463 1196850 1198166 1199235

1199524 1200437 1200485 1201942 1202368 1203438 1204111 1204112

1204113 1204708 CVE-2019-20454 CVE-2020-21913 CVE-2022-1587 CVE-2022-1706

CVE-2022-2625 CVE-2022-40674 CVE-2022-42010 CVE-2022-42011 CVE-2022-42012

CVE-2022-43680

1195463,1196850

This update for apparmor fixes the following issues:

- Add new rule to fix reported 'DENIED' audit records with Apparmor profile 'usr.sbin.smbd' (bsc#1196850)

- Add new rule to allow reading of openssl.cnf (bsc#1195463)

1164384,1199235,CVE-2019-20454,CVE-2022-1587

This update for pcre2 fixes the following issues:

- CVE-2019-20454: Fixed out-of-bounds read in JIT mode when \X is used in non-UTF mode (bsc#1164384).

Severity
important
Lowest
Low
Medium
High
Critical

Container Advisory ID : SUSE-CU-2022:3032-1
Container Tags : trento/trento-db:14.5 , trento/trento-db:14.5-rev1.0.0 , trento/trento-db:14.5-rev1.0.0-build2.2.168 , trento/trento-db:latest
Container Release : 2.2.168
Severity : important
Type : security

Topics%20covered

Topics Covered

security advisory security issue SUSE important patch trento

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here